In the figure, the new items introduced by the second embodiment are indicated in bold. [0198] In general, the service can be identified for example by [0199] Destination host name or IP address and the port number (in this case IP header and the protocol e.g. UDP or TCP header has to be studied): [0200] An ftp connection to a certain host [0201] A telnet connection to a certain host [0202] An e-m